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CLAIMS 

Having thus described our invention, what we claim as new and 
desire to secure by Letters Patent is as follows: 

1 LA method for selectively denying access to encoded data, said method 

2 comprising the steps of: 

3 connecting at least one media device to a mission planning 

4 workstation located at a "home base", wherein each media device is 

5 capable of connections with both the mission planning workstation and a 

6 target portable computing device, the portability being enabled by 

7 transport of the computing device by a land, air, sea or space vehicle 

8 during a mission; 

9 encrypting sensitive data using an encryption key; 

10 loading the encrypted data onto at least one of the media devices; 

1 1 loading unencrypted data onto at least one of the media devices, 

12 wherein data necessary to enable the vehicle and target portable computing 

1 3 device to return to a location selected as a mission end location remains 

14 unencrypted; 

15 disconnecting each of the at least one media devices from the 

1 6 mission plaiming workstation; 

17 connecting each of the at least one media devices to the target 

1 8 portable computing device; 

19 powering up the target portable computing device, thereby enabling 

20 it to execute a desired program or process; 

21 transporting the target portable computing device and media 

22 devices via a land, air, space or sea vehicle to a location physically distant 

23 from the mission planning workstation, thereby commencing the mission; 

24 and 

25 providing the vehicle operator or pilot, or other mission personnel 
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26 traveling with the vehicle, a means to delete the encryption key from 

27 volatile memory resident on the target portable computing device in the 

28 event of a threat, whether perceived or real; and 

29 providing a means to automatically delete the encryption key from 

30 volatile memory resident on the target portable computing device in the 

3 1 event of a loss of power to the target portable computing device. 

1 2. A method as recited in claim 1, wherein the step of ensuring that the 

2 encryption key is not resident in non- volatile memory on any media 

3 device, fiirther comprises the steps of: 

4 loading the encryption key into non- volatile memory on one of the 

5 at least one media devices prior to encrypting the data; and 

6 deleting the encryption key from the non-volatile memory at a 

7 point in time after the at least one media device is installed in the target 

8 portable computer and after the target portable computer is powered up 

9 and running associated operational software. 

1 3. A method as recited in claim 2, wherein the step of deleting the 

2 encryption key overwrites the location in non- volatile memory where the 

3 encryption key previously resided a desired number of times. 

1 4. A method as recited in claim 2, wherein the step of deleting is triggered 

2 by an indication that the vehicle used for transporting the target portable 

3 computing device has left the home base. 

1 5. A method as recited in claim 1, wherein the step of encrypting sensitive 

2 data fiulher comprises the steps of: 

3 selecting an encryption key, wherein the encryption key comprises 

4 a number of bits sufficient to prohibit an unauthorized person from 

5 "breaking" the encryption key at a desired level of difficulty; and 
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6 loading the selected encryption key into non- volatile memory on 

7 one of the at least one media devices. 

1 6. A method as recited in claim 5, wherein an operator of the target 

2 portable computing device has no knowledge of the encryption key used to 

3 encrypt data on the at least one media device in the encrypting step, and 

4 the encryption key is maintained at the home base mission planning 

5 workstation. 

1 7. A method as recited in claim 5, wherein the step of selecting an 

2 encryption key selects a new key on a desired periodic basis, thereby 

3 minimizing a risk of compromise of a previously used encryption key. 

1 8. A method as recited in claim 1, further comprising the steps of: 

2 perceiving a threat by a member of the mission; and 

3 deleting the encryption key using means providing the vehicle 

4 operator or pilot, or other mission personnel traveling with the vehicle, a 

5 means to delete the encryption key. 

1 9. A method as recited in claim 8, further comprising the step of 

2 transporting the vehicle to the selected mission end location, wherein 

3 encrypted data remains encrypted and unencrypted data enables the vehicle 

4 to operate at with sufficient performance to arrive at the mission end 

5 location. 

1 10. A method as recited in claim 1, fiirther comprising the step of losing 

2 power to the target portable computing device, thereby automatically 

3 deleting the encryption key fi-om volatile memory resident on the target 

4 portable computing device. 
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1 1 1. A method as recited in claim 10, further comprising the step of 

2 transporting the vehicle to the selected mission end location, wherein 

3 encrypted data remains encrypted and unencrypted data enables the vehicle 

4 to operate at with sufficient performance to arrive at the mission end 

5 location. 

1 12. A system for selectively denying access to encoded data, comprising: 

2 a selected encryption key, the key being of a number of bits 

3 sufficient to deter compromise of sensitive data to a desired difficulty 

4 level; 

5 a target portable computing device loaded onto a land, sea, air or 

6 space vehicle, the target portable computing device used for mission 

7 specific tasks and having connections for at least one media device, 

8 wherein sensitive encrypted data and/or unencrypted benign data is to be 

9 loaded on the at least one media device depending on mission parameters, 

10 the target computing device comprising: 

1 1 means to delete the encryption key from volatile memory 

12 resident on the target portable computing device in the event of a 

13 threat, whether perceived or real; and 

14 means to automatically delete the encryption key fi*om 

1 5 volatile memory resident on the target portable computing device 

16 in the event of a loss of power to the target portable computing 

17 device; 

18 a mission planning computer connected to at least one media 

19 device during loading and encryption of sensitive data, and loading of 

20 unencrypted benign data, wherein the encryption key is loaded into the 

2 1 mission planning computer, and wherein the mission planning computer 

22 remains at a physical distance firom the target computing device after 

23 commencement of the mission, 

24 wherein after sensitive data is encrypted on at least one media 
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25 device connected to the mission planning computer, each of the at least 

26 one media devices are connected to the target portable computing device 

27 and the encryption key is resident only in volatile memory on any media 

28 device connected to the target portable computing device after mission 

29 commencement, and 

30 wherein sufficient unencrypted data resides on at least one media 

3 1 device connected to the target portable computing device to enable the 

32 mission vehicle to return to a selected mission end location in the event 

33 that the encryption key is deleted from volatile memory on the target 

34 portable computing device during the mission. 

1 13. A system as recited in claim 12, further comprising: 

2 means for communication between the mission plaiming computer 

3 and at least one media device and target portable computing device, 

4 wherein the at least one media device is connected simultaneously to both 

5 the mission planning computer and the target portable computing device 

6 prior to mission commencement and during data encryption. 
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